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(57) ABSTRACT 

What is disclosed is a method having the first step of 
receiving, on a routing manager port address, a set of 
accounting request packets from a network access server 
having a network access server port address. Then, parsing 
the accounting request packet to derive a command flag and 
forwarding the set of accounting request packets to an 
authentication server, having an authentication server port 
address, over the authentication server port address. The 
method includes the further step of generating a set of 
routing table modification commands for a network router 
based on the command flag. What is also disclosed is an 
apparatus having a network access server, an authentication 
server coupled to the network access server, and a routing 
manager coupled to the network access server and the 
authentication server. The network access server has a 
network access server port address, the authentication server 
has an authentication server port address, and the routing 
manager has a routing manager port address. The routing 
manager is configured to: (1) receive, on the routing man- 
ager port address, a set of accounting request packets from 
the network access server port address; (2) parse the 
accounting request packet to derive a command flag; (3) 
forward the set of accounting request packets and to the 
authentication server port address; and (4) generate a set of 
routing table modification commands for a network router 
based on the command flag. 

26 Claims, 4 Drawing Sheets 
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ROUTING MECHANISM FOR NETWORKS 
WITH SEPARATE UPSTREAM AND 
DOWNSTREAM TRAFFIC 

BACKGROUND 

1. Field of the Invention 

The invention relates to the art of computer networks. In 
particular, the invention provides method and apparatus for 
accomplishing an automatic routing of separate upstream 
and downstream traffic in networks with one-way network 
devices, 

2. Description of Related Art 

Currently, most home personal computers (clients) are 
connecting with the Internet and other on-line services using 
the public telephone network Most often, data is transferred 
using Transmission Control Protocol/Internet Protocol 
(TCP/IP) implemented over such protocols as the Point-to - 
Point Protocol (PP) or Serial Line IP (SLIP). PPP and SUP 
allow clients to become part of a TCP/IP network (such as 
the internet) using the public telephone network and either 
an analog public service telephony network (PSTN), modem 
or an Integrated Services Digital Network (ISDN) device. 
Clients connect to a network by "dialing-up" a Point of 
Presence (POP), or "headend", server, which then assigns 
the client an IP address. 

The public telephone network has a switched point-to- 
point architecture and only offers relatively low bandwidth 
as it was originally designed for analog voice communica- 
tion. Thus, it does not scale well to the delivery of broadband 
data such as multimedia As a result, there are several efforts 
to create a broadband data delivery infrastructure for client 
applications. Such an infrastructure, when combined with 
the increasingly powerful clients that are now available, will 
enable the delivery of rich multimedia programming to the 
home. 

Broadband data delivery may be accomplished over a 
variety of different delivery infrastructures. Of these, per- 
haps the most promising is the infrastructure currently used 
to deliver cable television. Recent advancements in radio 
frequency modulation and demodulation technology, along 
with a large base of cable television subscribers, has made 
cable television service providers a strong candidate for 
becoming the preferred provider of broadband services to 
the home. In the broadband network architecture, a client 
will be continuously connected to the broadband network 
and will be in communication with one or more headend 
servers at all times. 

However, as the cable television network was originally 
intended only for transmitting data from a headend server 
located at the cable television service provider's site to one 
or more subscribers/users (i.e., the network was designed for 
a one -to -many transmission of information), no provision 
was made for receiving data from the equipment (i.e., 
clients) located at the users' locations. 

A solution has been proposed to achieve two-way com- 
munication of data using the existing cable television infra- 
structure. "Downstream data", defined to be data sent from 
a headend server to a client, is transferred over coaxial cable 
from the headend server into the home and to the user's 
client PC, while "upstream data", defined to be data sent 
from the client to the headend server, is transferred over the 
public telephone network. The asymmetrical allocation of 
upstream/downstream bandwidth is acceptable for most 
applications as the majority of users requires a larger down- 
stream bandwidth compared to the upstream bandwidth (i.e., 
most users are "data consumers" rather than "data 
generators"). 
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In operation, downstream data is received by a client 
using a "one-way" cable modem while upstream data is 
transmitted by an analog modem or an ISDN device, over 
the public telephone network, to the headend server via a 

5 Plain Old Telephone Service (POTS) server at the headend 
office. The POTS server forwards any upstream data sent by 
the client to the headend server for appropriate action (e.g., 
providing domain name server (DNS) services, simple mail 
transfer protocol (SMTP) services, gateway or proxy 

10 services, etc.). 

The client and the headend server communicate using 
TCP/IP. Data is transmitted in packets, where packets are 
defined as a block of data with appropriate transmission data 
attached in the form of a header and footer to be sent or 

15 received over a network. Downstream and upstream data are 
sent using the Ethernet standard, as defined by the Institute 
of Electrical and Electronics Engineemrs (IEEE) 802.3, 
modulated for transmission over: (1) coaxial cable using the 
cable modem; or, (2) a telephone line using the PSTN 

20 modem or the ISDN device and PPP or SLIP protocols. 
In order for the client to use the cable modem for 
communication, the cable-modem is installed as an Ethernet 
adapter in the client, and the client is configured just as an 
ordinary TCP/IP network machine. Thus, the client would 

25 have both a media access control (MAC) address for the 
Ethenet adaptor and a TCP/IP address. After the initial 
configuration and initialization of the cable modem, data 
would come from the headend server over the coaxial cable 
in the cable network. 

For downstream traffic to reach the client through the 
cable modem, however, the network router that is respon- 
sible for routing network traffic for the client at the headend 
server side need to be set-up to divert all downstream traffic 

35 to the client. Currently, each new client must be added 
manually to the routing tables of the network router using 
fixed IP addresses so that the internet service provider must 
maintain an IP address for each client. As each client has to 
be manually added, an additional burden is placed on the 

40 system administrator for supporting each client In addition, 
this system wastes IP addresses as not all clients are usually 
communicating with the network at the same time. If clients 
could be assigned IP addresses dynamically from a pool of 
addresses, then the service provider needs to maintain and 

45 reserve a number of IP addresses based on the potential 
number of IP addresses he might need to support 

What is needed is a network routing mechanism that will 
automatically set-up network traffic routing in networks with 
separate upstream and downstream traffic traveling over 

50 different transmission mediums, such as one-way cable 
systems. Currently, there are no existing implementations of 
a network router that will accomplish this type of routing 
automatically. Moreover, the network routing mechanism 
should allow dynamic allocation of IP addresses so that only 

55 one IP address is needed for each client and IP addresses can 
be conserved. 

SUMMARY 

A system which will allow the automatic set-up of a 
60 session between the client and the network over separate 
upstream and downstream channels includes a method hav- 
ing the first step of receiving, on a routing manager port 
address, a set of accounting request packets from a network 
access server having a network access server port address. 
65 Then, parsing the accounting request packet to derive a 
command flag and forwarding the set of accounting request 
packets to an authentication server, having an authentication 
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server port address, over the authentication server port with an integrated services digital network (ISDN) modem, 

address. The method includes the further step of generating which is digital in technology. PSTN 118 can support and 

a set of routing table modification commands for a network receive all transmission technologies mentioned above, and 

router based on the command flag. The system contains a can also be upgraded with different technologies as they 

network access server, an authentication server coupled to 5 appear. Also, cable modem 120 has an integrated network 

the network access server, and a routing manager coupled to adaptor that conforms with a standard such as the Institute 

the network access server and the authentication server. The of Electrical and Electronic Engineers (IEEE) 802.3 

network access server has a network access server port (Ethernet) standard. In another embodiment, client 108 can 

address, the authentication server has an authentication also contain a network access device (not shown) to com- 

server port address, and the routing manager has a routing id municate with cable modem 120. In this other embodiment, 

manager port address. The routing manager is configured to: network access device conforms to a standard such as the 

(1) receive, on the routing manager port address, a set of Ethernet standard In either embodiment, the network adap- 

accounting request packets from the network access server tor portion of client 108 has a media access control (MAC) 

port address; (2) parse the accounting request packet to address. According to the Ethernet standard, the MAC 

derive a command flag; (3) forward the set of accounting 15 address is unique to each network adaptor. Thus, the MAC 

request packets and to the authentication server port address; address of the network adaptor (and thus, client 108), is 

and (4) generate a set of routing table modification com- unique in computer network 100. 

mands for a network router based on the command flag. Network access server 104 provides dial-up services to 

client 108, In one embodiment, network access server 104 

BRIEF DESCRIPTION OF THE DRAWINGS 20 includes a set of modems (e.g., a "modem-bank") along with 

FIG. 1 illustrates a computer network configured in accor- control hardware, which is capable of servicing multiple 

dance with one embodiment of the present invention. chents concurrently. The set of modems can be a mix of 

nr* * Li 1 j- n * *u c *u analog and digital modems. Network access server 104 is 

FIG. 2 is a block diagram illustrating the process of the , & e . . m ,. 

- . • «u * *. 1 also responsible for assigning IP addresses to client 108 

operation of the components in the computer network 1C , , r , • m • 1 t 1 

lb based on a dynamic IP assignment scheme such as dynamic 

FIG. 3 is a flow diagram of the process of the operation hosl configuration prot ocol (DHCP). In another 

of the components in the computer network. embodiment, each client can have a pre-assigned, static IP 

FIG. 4 is a flow diagram of the process of the operation address. In yet another embodiment, network access server 

of a routing manager in the computer network in accordance 104 can service both clients with static IP addresses and 

with one embodiment of the present invention. 30 clients with dynamic IP addresses. During a call-setup, when 

a client dials into network access server 104, network access 

DETAILED DESCRIPTION server 104 communicates with authentication server to 

The present invention provides a method and apparatus verif V me user * a vaJid user t0 *Y** m ^ 

for networks with separate upstream and downstream traffic. 35 Authentication server 102 is used to provide authentica- 

For purposes of explanation, specific embodiments are set uon services for client computer systems such as client 108. 

forth to provide a thorough understanding of the present In one embodiment, authentication server 102 is connected 

invention. However, it will be understood by one skilled in t0 a database that contains all valid client user names and 

the art, from reading this disclosure, that the invention may passwords. When provided with a user name and a 

be practiced without these details. Further, although the 4Q password, authentication server 102 performs a look-up in 

present invention is described through the use of network lne database and determines if the user name exists and the 

with separate PSTN modem upstream and cable modem password assigned to that user name is correct Authenlica- 

downstream traffic, most, if not all, aspects of the invention tion server 102 then responds with the authentication results, 

apply to networks in general. Moreover, well-known Authentication server 102 also logs all requests for connect 

elements, devices, process steps and the like are not set forth 45 tion s for accounting purposes. For example, if the services 

in detail in order to avoid obscuring the present invention. are provided by a commercial internet service provider. 

FIG. 1 illustrates a computer network 100 configured in Routing manager 106 is used to automatically set-up a 

accordance with one preferred embodiment of the present communication session with client 108 with upstream and 

invention having an authentication server 102, a network downstream traffic on separate devices. The details of the 

access server 104, a routing manager 106, a client 108, a 50 operation of routing manager 106 is discussed further, in 

content server 110, and a network router 112. Authentication FIG. 4, below. 

server 102, network access server 104, routing manager 106, Each of authentication server 102, network access server 

content server 110, and network router 112 are coupled to 104, routing manager 106 has a user datagram protocol 

and communicate with each other through a network 114. In (UDP) port number. The UDPport number of each machine 

one preferred embodiment, network 114 is a transmission 55 is used by other machines to send data packets between 

control protocol/internet protocol (TCP/IP) network. In them. Thus, for example when authentication server 102 is 

other embodiments, network 114 is a network which uses sending a packet to routing manager 106, it will send it to the 

other network protocols for the transferring of information, UDP port of routing manager 106. 

Client 108 is coupled to and communicates with: (1) It is to be noted that the functionality provided by authen- 

network access server 104 through the use of a PSTN 60 tication server 102, network access server 104, routing 

modem 116 and a public service telephony network (PSTN) manager 106, content server 110, and network router 112 

118; and, (2) network router 112 through the use of a cable can be contained in one or more computer systems. For 

modem 120 and a cable plant 122. In one embodiment, example, the functions as provided by authentication server 

PSTN modem 116 is one which operates on standard tele- 102 and network access server 104 are implemented on two 

phone lines. In an alternate embodiment, PSTN modem 116 65 separate systems. Conversely, the functions offered by 

is one that operates over the wireless spectrum. In yet authentication server 102, routing manager 106, and content 

another embodiment, PSTN modem 116 can be replaced server 110 can be provided by multiple systems. Thus, 
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authentication server 102 can be implemented as a series of requestor, which is routing manager 106. Authentication 

authentication servers that handle authentication requests on server 102 is not aware that the requestor is routing manager 

a distributed basis (e.g., a "round-robin" request load dis- 106, but thinks that the requestor is network access server 

tribution system). 104- In °ne embodiment, authentication server 102 also 

FIG. 2 is a block diagram of the operation of authentica- 5 performs as t he accounting server to track the usage of client 

tion server 102, network access server 104, routing manager 10 f for bll i m f P ur POses. 

106, client 108, and network router 112, in accordance with ln ste P 212 > routin S manager 106 will "iptercepr the 

one preferred embodiment of the present invention. FIG. 3 accountmg response packet as it has the UDP port address 

is a flow diagram of the operation of the system in FIG. 2. °J** ^1°^ ^ * *T 
c i fnr i -11 l A vl c * nn m posed to respond for all authentication requests. After rout- 
Explanation of FIG. 3 will be made with references to FIG. 10 -1 ™™iinA • f __^ + , . , . 

v mg manager 106 intercepts the accounting request packet, 

routing manager 106 then forward the accounting response 

In step 200 of FIG. 3, client 108 initiates communications packet to network access server 104. At the same time, 

with network access server 104 to establish a session Client routing manager 106 will operate in accordance with what is 

108 initiates the connection by dialing-up network access contained in the accounting response packet. The functions 

server 104 with PSTN modem 116. After the initial hand- 15 performed by routing manager 106 in step 212 is further 

shaking and setup has been performed between client 108 described in FIG. 4, below. 

and network access server 104, client 108 communicates In step 214, network access server 104 allows client 108 

with network access server 104 to send the login information to begin communications with the network to access such 

for client 108 in step 202. In one embodiment, an username servers as content server 110 in FIG. 1, As described below 

and a password is sent to network access server 104, with the 20 ^ FIG - 4 > Network router 112 is configured through the use 

MAC address being used as the username and the password of a configuration packet sent from routing manager 106 

being a pre -determined password chosen by the user. In durin S ste P m durin g normal operation, client 108 

another embodiment, only the MAC address (i.e., the MAC Wl11 se ? d al1 upstream traffic using PSTN modem 116 to 

address of the network adaptor of client 108) is sent as a f twork ^ ^rver 104 and receive all downstream traffic 

username, with no passwords being used. 25 netw °* ^ " 2 ^ ^ ° f ^ m ° dem 

' . _ , , t 120 via cable plant 122. 

J^ tC L ' a / tC r Det Z ^ * C ™ T rCCe ,nf u FIG. 4 is a flow diagram illustrating the operation of 

MAC address of client 108, network access server 104 then routi ma m in more dctail Operation begins when 

communicates with authentication server 102 to validate that routing manager 106 receives the acc011 nting request packet 

client 108 is a valid client by sending and receiving autho- 3Q from ne twork access server 104. The accounting request 

nzation packets from authentication server 102. As packet contains the IP address and the MAC address of 

described in step 202, a user name and a password is sent client 108, and a COMMAND flag. In step 300, routing 

from network access server 104 to authentication server 102 manager 106 will forward the received accounting request 

in one embodiment. The user name would be the MAC packet to the appropriate destination, in which case it is the 

address of client 108, and the password would be a prede- 35 authentication server 102. 

termined password chosen by the user of client 108. In As stated above, network access server 104, authentica- 

another embodiment, the authentication server 102 is used to tion server 102, and routing manager 106 are each assigned 

query that the MAC address of client 108 is a valid MAC a TJDPport number. In operation, network access server 104 

address in the system. After the client has been authenticated is configured to send authorization packets to the UDP port 

by authentication server 102, network access server 104 will 4Q number of authentication server 102, and to send accounting 

send IP address to client 108 if client 108 is a client that request packets to the UDP port of routing manager 106. 

requires a dynamically assigned IP address. In another Similarly, authentication server 102 is configured to send 

embodiment, network access server 104 assigns an IP authorization packets to the UDP port of network access 

address to client 108 as soon as communication is estab- server 104, and accounting response packets to routing 

lished with client 108, as in step 200. 4f _ manager 106. Routing manager 106 responds differently 

In step 206, after network access server 104 transmits the depending on the detected sender of a received packet. 

IP address to client 108, it also submits an accounting When routing manager 106 detects that the UDP port of the 

request packet to the UDP port of the machine that is sender is network access server 104, routing manager 106 

responsible for authentication requests. will forward the received packet to the UDP port of authen- 

In step 208, for one embodiment, the UDP port number to 50 tication server 102. Routing manager 106 will then forward 

which network access server 104 sends the accounting the accounting response to network access server 104 on the 

request packet is actually set to be the UDP port number of UDP port of network access server 104. 

routing manager 106 and not authentication server 102. In step 302, routing manager 106 will parse the received 

Network access server 104 is not aware that routing manager accounting request packet to retrieve the IP address and the 

106 is "intercepting" the packet. When the packet is inter- 55 MAC address of client 108. Routing manager 106 will also 

cepted by routing manager 106, routing manager 106 both extract the COMMAND flag. Operation will then continue 

(1) forwards the accounting request packet to authentication with step 304. 

server 102 to reduce any latency introduced by routing In step 304, routing manager 106 will examine the COM- 

manager 106 intercepting the packet; and, (2) performs any MAND flag and determine if it is equal to a "START* 

actions needed with the information in the packet, such as 50 command. If the COMMAND flag is a START command, 

sending a configuration packet to network router 112 to then operations will continue with step 308. Otherwise, 

configure network router 112 so that the downstream traffic operation will continue with step 306. 

will be sent to client 108. The operation of routing manager i n step 306, routing manager 106 will examine the COM- 

106 is discussed in further detail in FIG. 4, below. MAND flag to see if it equals the "STOP" command. If the 

In step 210, after authentication server 102 receives the 65 COMMAND flag is equal to the STOP command, then 

forwarded accounting request packet from routing manager operations will end. Otherwise, operations will continue 

106, it will send an accounting response packet back to the with step 301. 
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In step 308, as the COMMAND flag is equal to the 
START command, routing manager will send an address 
resolution protocol (ARP) continuing command to network 
router 112, which includes the IP address and the MAC 
address of client 108. The ARP command to network router 5 
112 will insert an entry into the tables of network router 112 
that will associate the IP address to the MAC address such 
that all traffic destined for the IP address will be transmitted 
to the MAC address. As the MAC address is the address of 
cable modem 120 of client 108, all data which is received 10 
that is destined for the IP address of client 108 will be sent 
to the MAC address of client 108, specifically, to cable 
modem 120. After routing manager 106 sends the ARP 
command to network router 112, operations will then end. 

In step 310, routing manager 106 will send another ARP 15 
command to network router 112, which includes the MAC 
address of client 108. This is in response to the STOP 
command parsed by routing manager 106 in step 306. This 
ARP command will cause network router 112 to remove the 
entry containing the MAC address of client 108, and there- 20 
fore not transfer any downstream traffic to client 108. The 
accounting request packet that contains the "STOP' com- 
mand is generated based on a disconnect request of client 
108 that is sent to network access server 104. Network 
access server 104 can also generate the "STOP" command 25 
in cases where client 108 is somehow disconnected from 
network access server 104, due to poor line conditions or 
other conditions. 

While the present invention has been particularly 
described with reference to the various figures, it should be 30 
understood that the figures are for illustration only and 
should not be taken as limiting the scope of the invention. 
Many changes and modifications may be made to the 
invention, by one having ordinary skill in the art, without 
departing from the spirit and scope of the invention. 35 

What is claimed is: 

1. An apparatus comprising: 

a network access server to receive upstream packets from 
a client, the server having a network access server port 4Q 
address; 

an authentication server having an authentication server 
port address coupled to said network access server, 

a routing manager having a routing manager port address 
coupled to said network access server and said authen- 45 
tication server; 

wherein said routing manager is configured to: (1) 
receive, on said routing manager port address, a set of 
accounting request packets from said network access 
server port address; (2) parse said accounting request 50 
packet to derive a command flag; (3) forward said set 
of accounting request packets to said authentication 
server port address; and (4) generate a set of routing 
table modification commands for a network router 
based on said command flag, the network router to 55 
route downstream packets to the client. 

2. The apparatus of claim 1, wherein said network access 
server is to communicate with the client and receive authen- 
tication information from said client. 

3. The apparatus of claim 2, wherein said network access 60 
server is to send a set of authentication packets to said 
authentication server on said authentication server port 
address, said set of authentication packets containing said 
received authentication information. 

4. The apparatus of claim 3, wherein said authentication 65 
server is configured to respond to said set of authentication 
packets by sending a second set of authentication packets to 



,575 Bl 

8 

said network access server based on said received authen- 
tication information. 

5. The apparatus of claim 2, wherein said received authen- 
tication information contains an address of a network 
adapter of said client, the address and an Internet protocol 
(IP) address of the client being received by the routing 
manager in said accounting request packets and provided to 
the network router, so that the IP address of the client is 
associated with the network adapter address in an entry of a 
routing table of the network router. 

6. The apparatus of claim 1, wherein said command flag 
is a "START" command, and said set of routing table 
modification commands enters an entry in a routing table of 
said network router. 

7. The apparatus of claim 2 wherein said authentication 
information includes a media access control (MAC) address 
of said client, the MAC address and an Internet protocol (P) 
address of the client being received by the routing manager 
in said accounting request packets and provided to the 
network router, so that the IP address of the client is 
associated with the network adapter address in an entry of a 
routing table of the network router. 

8. The apparatus of claim 1, wherein said command flag 
is a "STOP" command, and said set of routing table modi- 
fication commands removes an entry in a routing table of 
said network router. 

9. The apparatus of claim 1 wherein the upstream packets 
are to be received from the client only using a dial-up 
connection, and the downstream packets are to be delivered 
to the client only using a network adapter connection. 

10. The apparatus of claim 1 wherein the network access 
server is not to deliver downstream packets to the client. 

11. A method comprising: 

receiving, on a routing manager port address, a set of 
accounting request • packets from a network access 
server having a network access server port address, the 
network access server to receive upstream packets from 
a client; 

parsing said accounting request packet to derive a com- 
mand flag; 

forwarding said set of accounting request packets to an 
authentication server having an authentication server 
port address; and 

generating a set of routing table modification commands 
for a network router based on said command flag, the 
network router to route downstream packets to the 
client. 

12. The method of claim 11, further comprising the step 
of communicating with a client to receive authentication 
information from said client. 

13. The method of claim 12, further comprising sending 
a set of authentication packets to said authentication server 
on said authentication server port address, said set of authen- 
tication packets containing said received authentication 
information. 

14. The apparatus of claim 13, further comprising 
responding to said set of authentication packets by sending 
a second set of authentication packets to said network access 
server based on said received authentication information. 

15. The method of claim 12, wherein said received 
authentication information contains an address of a network 
adapter of said client, the address and an Internet protocol 
(IP) address of the client being received by the routing 
manager in said accounting request packets and provided to 
the network router, so that the IP address of the client is 
associated with the network adapter address in an entry of a 
routing table of the network adapter. 
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16. The method of claim 12 wherein said authentication 
information includes a media access control (MAC) address 
of said client, the MAC address and aD Internet protocol (IP) 
address of the client being received by the routing manager 
in said accounting request packets and provided to the 
network router, so that the IP address of the client is 
associated with the network adapter address in an entry of a 
routing table of the network adapter. 

17. The method of claim 11, further comprising removing 
an entry in a routing table of said network router if said 
command flag is a "STOP" command. 

18. The method of claim 11, further comprising entering 
an entry in a routing table of said network router if said 
command flag is a "START' command. 

19. The method of claim 11 wherein the upstream packets 
are to be received from the client only using a dial-up 
connection, and the downstream packets are to be delivered 
to the client only using a network adapter connection. 

20. The method of claim 11 wherein the set of accounting 
packets are received from a network access server that is 
further configured not to deliver downstream packets to the 
client. 

21. An article of manufacture comprising: 

a machine- readable medium having instructions stored 
therein which, when executed by a set of processors, 
cause: 

receiving, on a routing manager port address, a set of 
accounting request packets from a network access 
server having a network access server port address, 
the network access server to receive upstream pack- 
ets from a client; 

parsing said accounting request packet to derive a 
command flag; 

forwarding said set of accounting request packets to an 
authentication server having an authentication server 
port address; and 



generating a set of routing table modification com- 
mands for a network router based on said command 
flag, the network router to route downstream packets 
to the client. 

5 22. The article of manufacture of claim 21 wherein the 
machine-readable medium has further instructions that 
cause communicating with a client to receive authentication 
information from said client. 

23. The article of manufacture of claim 22 wherein the 
machine readable medium has further instructions that cause 
sending a set of authentication packets to said authentication 
server on said authentication server port address, said set of 
authentication packets containing said received authentica- 
tion information. 

24. The article of manufacture of claim 23 wherein the 
15 machine readable medium has further instructions that cause 

responding to said set of authentication packets by sending 
a second set of authentication packets to said network access 
server based on said received authentication information. 

25. The article of manufacture of claim 22 wherein said 
20 authentication information includes a media access control 

(MAC) address of said client, the MAC address and an 
Internet protocol (IP) address of the client being received by 
the routing manager in said accounting request packets and 
provided to the network router, so that the IP address of the 
25 client is associated with the network adapter address in an 
entry of a routing table of the network adapter. 

26. The article of manufacture of claim 22 wherein said 
received authentication information contains an address of a 
network adapter of said client, the address and an Internet 

30 protocol (IP) address of the client being received by the 
routing manager in said accounting request packets and 
provided to the network router, so that the IP address of the 
client is associated with the network adapter address in an 
entry of a routing table of the network adapter. 

35 
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